Skip to main content

Generic Template

Our Pay product makes it easy and convenient for you to make a secure payment directly from your payment account. Our terms are set out below.

Effective Date: September XX 2025

Mastercard International Incorporated and its affiliates (together “Mastercard”, “we”, “us”, or “our”) respect your privacy. This Mastercard Open Banking Directory Privacy Notice (the “Privacy Notice”) explains how we collect, use, share, and protect your personal information when you create or use a Mastercard Open Banking Directory Digital Profile (“Digital Profile”). This Privacy Notice only applies to personal information you provide when creating a Digital Profile in order for Mastercard to provide you with Mastercard Open Banking services (“Services”). We recommend you read this notice together with Mastercard's Global Privacy Notice, the Fraud & Security Notice.

To learn more, click on one of the links below to jump to the listed section:

  1. What This Privacy Notice Covers
  2. Personal Information We May Collect
  3. How We May Use Your Personal Information
  4. How We Share Your Personal Information
  5. Your Choices
  6. Data Transfers
  7. How We Protect Your Personal Information
  8. Retention
  9. Children’s Privacy
  10. Updates to This Privacy Notice
  11. Data Controller and How to Contact Us

1. What This Privacy Notice Covers

This Privacy Notice describes the types of Personal Information we collect in connection with the Digital Profile and the Services, the purposes for which we collect that Personal Information, the other parties with whom we may share it and the measures we take to protect the security of the data. It also tells you about your rights and choices with respect to your Personal Information, and how you can contact us about our privacy practices.

Back to top

2. Personal Information We May Collect

“Personal Information” means any information relating to an identified or identifiable individual. We may collect Personal Information in connection with the Services, including when you create or use the Digital Profile. We may collect information about you directly from you or, insofar as permitted by applicable law, from third parties such as our service providers, marketing and business partners, financial institutions, merchants, and other participants.

The Personal Information we may collect depends on the context of your interactions with Mastercard and the choices you make (including your privacy settings), the products and features you use, your location, and applicable law.

We may collect the following categories of Personal Information, in each case always insofar as such collection is permitted for the respective purpose in accordance with applicable data protection laws, including obtaining your consent where required under law:

  • Registration information, such as your name, email address, phone number and profile country.
  • Financial information, such as your bank account and payment information.
  • Transaction information, such as billing or shipping address, merchant’s name and location, date and time of transaction, description of items purchased, total amount of transaction, authentication details and other information provided by financial institutions or merchants.

Please see the “Your Choices” section of this Privacy Notice to learn more about your choices.

Back to top

3. How We May Use Your Personal Information

We may use your Personal Information for the following purposes and as otherwise described in the Privacy Notice.

  • Access and store bank account information to share with third parties that allow you to initiate and receive payments.
  • Create, manage and personalize your Digital Profile as part of the Services.
  • Protect against and prevent fraud, and other legal or information security risks.
  • Provide and communicate with you about products and services offered by Mastercard, financial institutions, merchants and partners in each case in compliance with applicable law (including obtaining your consent where required under law).
  • Operate, evaluate and improve our business, including anonymization and analytics in compliance with applicable law (including obtaining your consent where required under law)
  • Provide other products or services that work in tandem with the Services such as Mastercard Payment Passkey, that serve other purposes for which we provide specific notice at the time of collection, and as otherwise authorized or required by law.
  • Operate, evaluate and improve integrations with participants in the ecosystem to test and evaluate interoperability and implementation design decisions.

    Processing activity

Legal Basis for Processing (where required under applicable law)
  • Allow sharing of such information with third party service providers.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of creating and managing accounts and identify your identity, and respond to your inquiries.
  • Create, manage and personalize your Digital Profile as part of the Services.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of creating and managing accounts and identify your identity, and respond to your inquiries.
  • Validate and update your bank account information and authenticate your identity, including with your bank.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • The processing is necessary for performance of a contract to which you are party to; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud and managing risk exposure, as well as tokenizing your payment credentials to make your payments more secure.
  • Protect against and prevent fraud, unauthorized transactions, claims and other liabilities, and manage risk exposure and franchise quality with respect to the integrity and security of our payments network.
  • When we process Personal Information for fraud prevention, we may act as a controller or as a processor. When we act as a controller, we rely on one of the following legal grounds:
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud and managing the risk exposure.
  • For more information on our fraud prevention and monitoring activities, please see our Fraud & Security Notice.
  • Communicate with you about the Services, including by sending you announcements, updates, security alerts, and support and administrative messages.
  • Provide support and maintenance and to respond to your requests, question, and feedback.
  • You consented to the use of your Personal Information; or.
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or.
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud and managing risk exposure, as well as communicating with you about the Services and responding to your requests, questions, and feedback.
  • Manage our customer, supplier and vendor relationships, including to create and publish business directories (which may include business contact information).
  • You consented to the use of your Personal Information; or .
  • The processing is necessary for entering into, or performance of a contract to which you are a party; or.
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of managing our customer, supplier and vendor relationships.
  • Performing due diligence reviews, accounting, auditing, billing, reconciliation and collection activities.
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or.
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purposes of performing due diligence, billing, reconciliation and collection activities.
  • Anonymize Personal Information and prepare and furnish aggregated data reports showing anonymized information (including compilations, analyses, analytical and predictive models and rules, and other aggregated reports) for the purpose of advising our financial institutions, merchants and other customers and partners regarding past and potential future patterns of spending, fraud, and other insights that may be extracted from this data.
  • You consented to the use of your Personal Information; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purposes of anonymizing Personal Information and preparing and furnishing aggregated data reports.
  • Improve our online products and services, such as by assessing how many users access or use our online products and services, which content, products and features of our online products and services most interest our visitors, what types of offers our customers like to see and how our online products and services perform from a technical point of view.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud and managing risk exposure, as well as operating, evaluating, and improving our products or services.
  • Perform data analyses (including anonymization of Personal Information) to determine, among other measurements, business performance, number of registrants, channels, transaction spend and site performance.
  • Operate, audit, evaluate, monitor and improve our business and interactive assets (including by developing new products and services; managing our communications; analyzing our products, services and websites; facilitating the functionality of our websites).
  • Provide reporting back to the issuer of your enrolled payment cards and the merchants you transact with via the Services.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud and managing risk exposure, as well as preparing and furnishing aggregated data reports.
  • Comply with industry standards and our policies.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purposes of complying with industry standards and our policies.

4. How We Share Your Personal Information

We may share Personal Information with the following parties, in each case always only in accordance with applicable data protection laws, including obtaining your consent where required under law:

  • Mastercard’s headquarters in the U.S., our affiliates and other entities within Mastercard’s group of companies.
  • Service providers acting on our behalf.
  • Other participants in the payment ecosystem, including financial institutions, wallet providers, and merchants.
  • Third parties for fraud monitoring and prevention purposes, or other purposes required by law.
  • Government authorities or law enforcement officials as required by law or for administrative purposes and to the extent that applicable law allows and/or requires this.
  • Third parties whose feature you use in connection with our products and services or with your consent.
  • Other entities as required under applicable law or our advisers, any prospective purchaser’s advisers, and the new owner of the business as part of any corporate reorganization process including, but not limited to, in the event of a sale or transfer of our business or assets.

We do not sell your Personal Information as defined by the California Consumer Protection Act of 2018 or disclose Personal Information we collect about you, except as described in this Privacy Notice or as disclosed to you at the time of data collection.

Back to top

5. Your Rights and Choices

Depending on your country, you may have the right or choice to:

  • Opt out of some collection or uses of your Personal Information, including the use of cookies and similar technologies, the use of your Personal Information for marketing purposes, and the anonymization of your Personal Information for data analyses.
  • Access your Personal Information, rectify it, restrict or object to its processing, or request its deletion or anonymization.
  • Receive the Personal Information you provided to us to transmit it to another company.
  • Withdraw your consent at any time and free of charge if we have asked for your consent to process your Personal Information. Your withdrawal does not affect the legality of the processing carried out based on your consent until the withdrawal.
  • Where applicable, lodge a complaint with your supervisory authority.

These rights might be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your Personal Information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

Where Mastercard requires Personal Information to comply with legal or contractual obligations, the provision of such information is mandatory. If such data is not provided, Mastercard will not be able to manage the engagement relationship, or to meet obligations placed on it. In all other cases, provision of requested Personal Information is optional.

You can exercise your rights on Mastercard’s “My Data Center” portal or You may also submit a request as described in the “How to Contact Us” section below.

You have certain rights and we offer you certain choices about what Personal Information we collect from you, how we use that information, and how we communicate with you. We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights, except where the different price or level of good or service is reasonably related to the value of the data that we receive from you; however, we do not control merchants’ practices in this regard. In some instances, we may not be able to provide you with the good or service that you request if you choose to exercise certain rights.

If applicable, you can choose to opt out of the anonymization of your Personal Information to perform data analyses, by clicking here.

For the avoidance of doubt, the option to opt out of the processing activities set out above does not mean that we undertake the respective activities without your consent where such consent is required under applicable law.

Depending on where you are located (such as Canada, California, the European Economic Area (EEA), Switzerland or Brazil) you may have the right to:

  • Request access to and receive information about the Personal Information we maintain about you, to update and correct inaccuracies in your Personal Information, to restrict or to object to the processing of your Personal Information, to have the information anonymized or deleted, as appropriate, or to exercise your right to data portability to easily transfer your Personal Information to another company.
  • In addition, you may also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
  • Withdraw any consent you previously provided to us regarding the processing of your Personal Information, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before your consent withdrawal.

Those rights may be limited in some circumstances by local law requirements – for example, where we can demonstrate that we have a legal requirement to process your Personal Information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

Where Mastercard requires Personal Information to comply with legal or contractual obligations, the provision of such information is mandatory. If such data is not provided, Mastercard will not be able to manage the engagement relationship, or to meet obligations placed on it. In all other cases, provision of requested Personal Information is optional.

If we fall short of your expectations in processing your Personal Information or you wish to make a complaint about our privacy practices, please tell us because it gives us an opportunity to fix the problem. To assist us in responding to your request, please give full details of the issue. We attempt to review and respond to all complaints within a reasonable time and as required under applicable law.

To update your preferences, ask us to remove your information from our mailing lists or submit a request to exercise your rights under applicable law, contact us as specified in the "How to Contact Us" section below. We have developed Mastercard’s “My Data Center” portal to facilitate the exercise of your rights. You may also opt out from certain processing of your Personal Information, e.g. via our opt-out webpage.

6. Data Transfers

Mastercard is a global business. We may transfer your Personal Information to the United States and other countries which may not have the same data protection laws as the country in which you initially provided the information, but we will protect your Personal Information in accordance with this Privacy Notice, as disclosed to you at the time of data collection.

In case of such transfer, if you are located in the EEA, we will process your Personal Information in accordance with our Binding Corporate Rules (“BCRs”) and other appropriate data transfer mechanisms such as the European Commission’s Standard Contractual Clauses to ensure an adequate level of protection of your Personal Information. You may contact us as specified in the “How to Contact Us” section below to obtain a copy of the safeguards we use to transfer Personal Information outside of the EEA.

Mastercard’s privacy practices, described in this Global Privacy Notice, comply with the APEC Cross Border Privacy Rules (“CBPR”) System. The APEC CBPR system provides a framework for organizations to ensure protection of Personal Information transferred among participating APEC economies. More information about the APEC framework can be found here.

Mastercard is a global business. We may transfer the Personal Information we collect about you to recipients in countries other than your country, including the United States, where we are headquartered. These countries may not have the same data protection laws as the country in which you initially provided the information and may provide more limited recourse mechanisms, including dissimilar or, at times, weaker data protection rights. When we transfer your Personal Information to other countries, we will protect that information as described in this Privacy Notice, as disclosed to you at the time of data collection.

We comply with applicable legal requirements providing adequate safeguards for the transfer of Personal Information to countries other than the country where you are located. In particular, we have established and implemented a set of BCR that have been recognized by EEA data protection authorities as providing an adequate level of protection to the Personal Information we process globally. A copy of our BCRs is available here. We may also transfer Personal Information to countries for which adequacy decisions have been issued, use contractual protections for the transfer of Personal Information to third parties, such as the European Commission’s Standard Contractual Clauses or their equivalent under applicable law. You may contact us as specified in the “How to Contact Us” section below to obtain a copy of the safeguards we use to transfer Personal Information outside of the EEA.

Mastercard’s privacy practices, described in this Global Privacy Notice, comply with the APEC CBPR system. The APEC CBPR system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework can be found here.

7. How We Protect Your Personal Information

We maintain appropriate security safeguards and have implemented robust technical and organizational measures to protect your Personal Information against the loss, misuse, unauthorized access, disclosure, alteration or destruction utilizing current state of the art technologies.

  

The security of your Personal Information is important to Mastercard. We are committed to protecting the information we collect. We maintain reasonable administrative, technical and physical safeguards designed to protect the Personal Information you provide, or we collect, against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

We use SSL encryption on a number of our websites from which we transfer certain Personal Information.

Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure. Consequently, while we will do our best to protect your Personal Information, we cannot ensure or warrant the security of any Personal Information you transmit to us and you understand that any Personal Information that you transfer to Mastercard is done at your own risk. We use firewalls to protect your information from unauthorized access, disclosure, alteration, or destruction. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software.

We will never ask you for your account details in any unsolicited communication (including unsolicited correspondence, such as letters, phone calls or e-mail messages). If you believe your account has been compromised, please contact us as specified in the "How to Contact Us" section below.

8. Retention

We will retain your Personal Information for as long as necessary to provide the products and services you have requested and will take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

Afterwards, we may retain data for an appropriate period to protect ourselves from legal claims, to administer our business, or to the extent permitted by applicable law, which may require us to hold your Personal Information for specific periods. We will delete your Personal Information when you withdraw your consent, if there is no other legal ground for further processing (e.g., a statutory obligation to retain your Personal Information), or when you object to the processing in accordance with “Your Choices” section (see above) or when we are obligated to delete it in accordance with an obligation under applicable law. For further information about our approach to data retention, please ask privacyanddataprotection@mastercard.com.

Back to top

9. Children’s Privacy

Mastercard products and services are not directed to, nor intended for, children under the age of 16.

Mastercard does not knowingly collect, maintain, or use Personal Information from children under 16 years of age, and no part of our products and services are directed to children.

If you learn that a child has provided us with Personal Information in violation of this Privacy Notice, then you may alert us at privacyanddataprotection@mastercard.com.

10. Updates to This Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in our privacy practices.

This Privacy Notice may be updated periodically to reflect changes in our Personal Information practices. When we do, we will also revise the "effective data" at the top of this Privacy Notice. When we make any material changes to this Privacy Notice, if required under applicable law, we will post a prominent notice on our websites sufficiently in advance to notify you of changes to our Privacy Notice by indicating at the top of the notice when it was most recently updated. We may also notify you of updates by sending a notice to the primary email address specified in your account or other appropriate mechanism as required by applicable law so that you have the opportunity to exercise your rights.

In certain circumstances, insofar as required by applicable law, we may seek your consent. However, please always remember that we will never ask you for your account details in any unsolicited communication (including unsolicited correspondence, such as letters, phone calls or e-mail messages). If you believe your account has been compromised, please contact us as specified in the "How to Contact Us" section below.

11. How to Contact Us

The entity responsible for the processing of your Personal Information (or data controller) varies depending on the type of Open Banking Solutions that you use:

  • For any Open Banking Solutions other than Aiia branded Open Banking Solutions, the entity responsible for the processing of your Personal Information (or data controller) is Mastercard Europe SA. You may contact our global privacy office at privacyanddataprotection@mastercard.com, or write to us at:
    Europe Data Protection Office
    Mastercard Europe SA
    Chaussée de Tervuren 198A
    B-1410 Waterloo
    Belgium
  • For Aiia branded Open Banking Solutions, the entity responsible for the processing of your Personal Information (or data controller) is Aiia A/S. You may contact our European privacy office at privacyanddataprotection@mastercard.com, or write to us at:
    Aiia A/S
    Att.: Privacy
    Artillerivej 86, st. tv.,
    2300, Copenhagen
    Denmark

You have certain rights and choices regarding the Personal Information we maintain about you. For more information about your rights, or to learn more about how we share, transfer, retain and protect your Personal Information, please read our Global Privacy Notice.

Our Spiir Open Banking Solution has its own specific privacy notices. Please consult that notice for more information about our processing in that context. For enquiries about your Mastercard card and your purchase, please contact your financial institution or merchant. More information about how to contact them can be found on their websites.

Back to top

Introduction

Mastercard International Incorporated ("Mastercard" or "We") provides to you www.mastercard.us (the "Mastercard Site") for your personal informational, educational and entertainment use. Please feel free to browse, download from, and otherwise use the Mastercard Site. By accessing and using the Mastercard Site, you accept and agree to the following terms of use "Terms of Use") without limitation or qualification. If you do not agree with these Terms of Use, please do not use the Mastercard Site.

Content

Right to Use Site Content

We are granting you a limited, nonexclusive, revocable license for you to view, share, print or download any Content, as defined below, from the Mastercard Site for your own personal use. You are not granted the right to license, republish, distribute, copy, assign, sublicense, transfer, sell, prepare of derivative works or other non-personal use any Content on the Mastercard Site. No part of any Content may be reproduced in any form or incorporated into any information retrieval system, electronic or mechanical, other than for your personal use. You may not access or use the Mastercard Site in any way that could or is intended to damage or impair the Mastercard Site, or any server or network underlying the Mastercard Site, or interfere with anyone else's use and enjoyment of the Site. You are also granted a limited, revocable, and nonexclusive right to create a hyperlink to the Site or its any Content therein so long as the link does not portray Mastercard, or its products or services in a false, misleading, derogatory, or otherwise offensive matter or imply a sponsorship or endorsement of your site, page or content by Mastercard.

You may not use automated systems (e.g., robots, spiders, etc.) to access the Site. You agree not to collect personally identifiable information of other users of the Site or to sell or otherwise exploit that information. 

Except for the limited rights expressly granted herein, all right, title and interest in and to the Mastercard Site and all Content contained therein are reserved and owned by Mastercard.

MASTERCARD RETAINS THE RIGHT TO DENY ACCESS TO THIS SITE TO ANYONE WITHOUT NOTICE AT ITS COMPLETE DISCRETION FOR ANY REASON, INCLUDING FOR VIOLATION OF ANY OF THESE TERMS OF USE, INCLUDING ANY USE RIGHTS.

Changes to the Mastercard Site and Terms of Use

Mastercard reserves the right to change or modify Content, materials or information appearing on or in connection with this Site, including these Terms of Use, at any time without notice to you. Mastercard may at any time revise these Terms of Use by updating this posting. You are bound by such revisions and should therefore visit these pages to review the current Terms of Use from time to time.

Intellectual Property Rights

The Mastercard Site Content is protected by applicable intellectual property laws and all Content is owned by Mastercard or used by Mastercard under a license or with permission. All text, formatting (including without limitation the selection, coordination and arrangement of materials on the Mastercard Site, and the images, graphics, animation, tools, widgets, applications, commercials, videos, music, sounds, articles, copy, creative materials, photos, trademarks, service marks, trade names, and logos, and other materials and information on this Site are subject to the intellectual property rights of Mastercard, its subsidiaries and affiliates, and their respective licensors and licensees (collectively "Content"). Certain features on this website may be covered by, or licensed under, U.S. Patent 6,091,956. These materials may not be copied, reverse engineered, decompiled, disassembled, modified, reposted to other web sites, framed, deep linked to, changed, or otherwise distributed, redistributed, licensed, sublicensed or transferred in any form by you. Nothing contained on the Mastercard Site shall be construed as granting, by implication, estoppel or otherwise, any license or right to make commercial use of any Mastercard trademark, intellectual property right or copyrighted material without Mastercard's prior written permission. The trademarks, logos, trade names and service marks, whether registered or unregistered (collectively the "Trademarks") displayed on the Mastercard Site are Trademarks of Mastercard and its third party alliance partners. Nothing contained on the Mastercard Site should be construed as granting by implication or otherwise, any license or right to use any Trademark displayed on the Mastercard Site without the written permission of Mastercard or such third party that may own the Trademark. Mastercard U.S. Trademarks

Any unauthorized commercial use of these materials will violate Mastercard's intellectual property rights and will be subject to Mastercard's full legal rights and remedies.

Copyright Complaints

In operating the Site, Mastercard may act as a "services provider" (as defined by DMCA) and offer services as online provider of materials and links to third party web sites. As a result, third party materials that Mastercard does not own or control may be transmitted, stored, accessed or otherwise made available using the Site. Mastercard has in place certain legally mandated procedures regarding allegations of copyright infringement occurring on the Site and has adopted a policy that provides for the immediate removal of any content or the suspension of any user that is found to have infringed on the rights of Mastercard or of a third party, or that has otherwise violated any intellectual property laws or regulations, or this Agreement. If you believe any material available through the Site infringes a copyright, you should notify Mastercard using the notice procedure for claimed infringement under the DMCA (17 U.S.C. Sect. 512(c)(2)). Mastercard will respond expeditiously to remove or disable access to the material claimed to be infringing and will follow the procedures specified in the DMCA to resolve the claim between the notifying party and the alleged infringer who provided the Content. You should address infringement notices under the DMCA to: Copyright Agent, Mastercard, 2000 Purchase Street, Purchase, NY 10577, Attn: Law Department or to copyrightagent@mastercard.com.

Please provide the following notice:

  1. Identify the copyrighted work or other intellectual property that you claim has been infringed;
  2. Identify the material on the Site that you claim is infringing, with enough detail so that Mastercard may locate it on the Site;
  3. A statement by you that you have a good faith belief that the disputed use is not authorized by the copyright owner, its agent, or the law;
  4. A statement by you declaring under penalty of perjury that (a) the above information in your notice is accurate, and (b) that you are the owner of the copyright interest involved or that you are authorized to act on behalf of that owner;
  5. Your address, telephone number, and email address; and
  6. Your physical or electronic signature

Mastercard may give notice to its users of any infringement notice by means of a general notice on any of its websites, electronic mail to a user's e-mail address in its records, or by written communication sent by first-class mail to a user's physical address in its records. If you receive such an infringement notice, you may provide counter-notification in writing to the designated agent that includes the information below. To be effective, the counter-notification must be a written communication that includes the following:

  1. Your physical or electronic signature;
  2. Identification of the material that has been removed or to which access has been disabled, and the location at which the material appeared before it was removed or access to it was disabled;
  3. A statement from you under the penalty of perjury, that you have a good faith belief that the material was removed or disabled as a result of a mistake or misidentification of the material to be removed or disabled; and
  4. Your name, physical address and telephone number, and a statement that you consent to the jurisdiction of a Federal District Court for the judicial district in which your physical address is located, or if your physical address is outside of the United States, for any judicial district in which we may be found, and that you will accept service of process from the person who provided notification of allegedly infringing material or an agent of such person.

Interactive Forums and Groups and Feedback

User Submissions and Conduct

As a user of the Site you may submit your comments, which may consist of textual content and potentially photos, videos, images audio files, other types of content and links to such content if allowed by the Site (collectively referred to as "User Submissions"). You will be solely responsible for your own User Submissions and the consequences of posting or publishing them. In connection with User Submissions, you affirm, represent, and/or warrant that: the User Submission is your original work and that you own or have the necessary licenses, rights, consents, and permissions to use and authorize Mastercard to use any and all User Submissions in any and all media now known or hereinafter invented without territorial or time limitations and without compensation, and have all necessary consents to collect, use and disclose any personally identifiable information, images or likeness contained or displayed in any and all User Submissions to enable inclusion and use of the User Submissions in the manner contemplated by the Site and this Agreement. You agree that you will not submit as part of any User Submission any material that is copyrighted, protected by trade secret or otherwise subject to third party proprietary rights, including privacy and publicity rights, unless you are the owner of such rights or have permission from their rightful owner and the necessary consents from any individuals whose personally identifiable information is contained in such material to post the material and to grant Mastercard all of the license rights granted herein. Furthermore, you warrant and represent that you will disclose the existence of any patent registrations or pending applications held by you which relate in any way to your User Submission.

You acknowledge and agree that no confidential relationship or obligation of secrecy or confidentiality is established between you and Mastercard regarding the User Submission, despite any statement or legend to the contrary on the User Submission and any related materials

Ownership and Use of User Submissions

By making a User Submission, you understand that you are granting Mastercard a worldwide, perpetual, royalty-free, fully-paid, irrevocable, sublicensable, transferrable, non-exclusive license in and to the User Submission (including under copyright, patent, and trademark law), including the right to edit, change, and create derivative works, and any concepts or ideas contained in the User Submission, including the documents, artwork, statements, drawings, outlines, proofs, displays, photographs, footage, outtakes, musical scores, audio and video footage, discs, whether in print or electronic form, produced or created by you as part of the User Submission. The license you are granting to Mastercard includes the right of Mastercard and its designees to reproduce the User Submission, prepare other works using the User Submission, combine your User Submission with other works, and alter, translate, distribute copies, display, perform, license and apply for copyright registration of the transformed User Submission in the name of Mastercard throughout the world in perpetuity in any media that now exists or may exist in the future. For example, the above grant permits Mastercard and its designees to use only certain portions of your User Submission, rerecord or modify any audio tracks or visual images you provide, rewrite the User Submission, and/or incorporate other materials, either created by Mastercard or licensed from others, with your Submission. If we create other works using the User Submission, those works will be owned by us and may be used in accordance with these guidelines, and shall not be subject to your approval.

By making a User Submission, you are waiving and agreeing not to assert any copyrights or "moral" rights or claim resulting from our alteration of the Submission or any photograph(s), footage, illustrations, statements or other work contained in the Submission. You are also agreeing to appoint Mastercard as your irrevocable attorney-in-fact with respect to the User Submission, with the right to execute and deliver any documents, in your name and on your behalf, to ensure that Mastercard can use the User Submission that you are licensing in any way Mastercard sees fit to own and protect the rights in any derivative works created from your User Submission, and to have the User Submission removed from any other website or forum.

Upon request of Mastercard, you shall execute and deliver such additional instrument of license, as may be solely deemed by Mastercard, reasonably necessary to establish Mastercard's ability to use the User Submission as it sees fit and that "Moral Rights of Authors" are waived under these Terms and Conditions. Should Mastercard fail to request the said license instrument as stated, that shall not be deemed a waiver of Mastercard's rights and Mastercard may at a later time request the instrument.

Submissions or Feedback

From time to time, we may ask that you for your feedback on Mastercard's Site and products and/or services. Any communication or material you transmit or post will be (a) treated as non-confidential and non-proprietary by Mastercard, (b) become the property of Mastercard and Mastercard shall exclusively now and hereinafter own all rights, title and interest therein, and (c) used without restriction by Mastercard licensees and affiliates at its sole discretion without any obligation, compensation or other liability to you. Such use may be for any purpose whatsoever, including, but not limited to, reproduction, disclosure, transmission, publication, broadcast and posting whole or in part, in any medium and in any manner, now known or later developed, on this Site or otherwise. And Mastercard shall be under no obligation to respond to any such communication. Notwithstanding the foregoing, Mastercard maintains a policy of not accepting or considering any creative ideas, suggestions or materials from the public regarding its products and services ("Submissions"), and therefore, you should not make any Submissions to Mastercard in any communications through this Site or otherwise. Nonetheless, if you do send us a Submission, despite our request not to do so, then such Submission shall immediately become the property of Mastercard and Mastercard shall exclusively now and hereinafter own all rights, title and interest therein. Furthermore, Mastercard shall be free to use any Submissions for any purpose whatsoever, including, but not limited to, developing and marketing products and services. Mastercard shall not be liable for such use or disclosure of such Submission or for any similarities in the Submission and any future Mastercard products and services.

Merchant and Merchants Offers

Merchants may provide to Mastercard certain discounts, rebates or other benefits (e.g. free shipping) on the purchases of goods and services ("Offers") that will be available on the Mastercard Site. Such Offers are subject to certain terms and conditions and may change at any time without notice to you. Mastercard will not be liable for any loss or damage incurred as a result of any interaction between you and a merchant with respect to such Offers. Except as set forth herein, all matters, including but not limited to delivery of goods and services, returns, and warranties are solely and strictly between you and the applicable merchants. You acknowledge that Mastercard and does not endorse or warrant the merchants that are accessible through the Mastercard Site nor the Offers that they provide.

Sweepstakes

From time to time, We make you aware of certain Mastercard related sweepstakes or other promotions. All such sweepstakes and promotions are subject to the Official Rules for such sweepstakes and promotions and all related applicable laws, regulations and statutes.

Third-Party Content and Links to Other Web Sites

The Mastercard Site may contain third party content and links to other web sites that are completely independent of this Site. Third-party content and links are included solely for the convenience of users and do not constitute any approval, endorsement or warranty by Mastercard. Moreover, Mastercard is not responsible for the accuracy, completeness, or reliability of third-party information, or the products or services offered or sold through any linked webs site and you assume sole responsibility for the use of third-party information. Any agreements, transactions, or other arrangements made between you and such third party are made solely at your own risk. When you click on a third-party link, you will leave the Mastercard Site. Any personal information you submit on the resulting site will not be collected or controlled by Mastercard but will be subject to the privacy notice or terms of use of the resulting site. Please review the privacy policy and terms of use of the resulting site for more information on its privacy practices.

Privacy Policy

Mastercard recognizes the importance of respecting the privacy of those who visit and choose to take advantage of the programs and information offered on our web sites. The Mastercard Global Privacy Notice (linked below) provides an overview of what you can expect when you enroll in one of our programs or simply browse the Mastercard Site. Different or program specific policies may be applicable to our country-specific or program-specific pages. Please see the link at the bottom of any page for the applicable version of our policy. Click here to view our Global Privacy Notice.

Indemnification

You agree to indemnify, defend and hold Mastercard and its business partners, staff and affiliates harmless from any liability, loss, claim and expense, including reasonable attorneys' fees and expenses, related to either your violation of these Terms of Use or your use of the Site. You will indemnify and hold Mastercard harmless from and against any claim, suit or proceeding brought against Mastercard arising from or in connection with violations of copyright or other intellectual property or other rights of third parties contained in your User Submissions and/or any other violation of law or breach of contract obligations relating to the User Submissions. You will indemnify and hold Mastercard harmless from and against any claims, damages and costs resulting directly or indirectly from the use, disposition, reproduction, publication or public communication of the User Submission.

Disclaimer of Warranties

While Mastercard will use reasonable efforts to ensure that all material on this Site is correct; however, accuracy cannot be guaranteed and Mastercard does not assume any responsibility or liability for the accuracy, completeness or authenticity of any information contained in this Site.

THE MASTERCARD SITE AND ALL CONTENT CONTAINED HEREIN ARE PROVIDED TO YOU "AS IS," AND "AS AVAILABLE," AND ALL WARRANTIES, EXPRESS OR IMPLIED, ARE HEREBY DISCLAIMED, INCLUDING ANY WARRANTY OF MERCHANTABILITY, TITLE/NONINFRINGEMENT, QUALITY OF INFORMATION, OR FITNESS FOR A PARTICULAR PURPOSE. NO INFORMATION OBTAINED BY YOU FROM MASTERCARD THROUGH THE SITE SHALL CREATE ANY WARRANTY NOT EXPRESSLY STATED HEREIN. WITHOUT LIMITATION, MASTERCARD DISCLAIMS ALL WARRANTIES REGARDING THE AVAILABILITY OF THE SITE, THAT THE MASTERCARD SITE WILL OPERATE ERROR-FREE, THAT DEFECTS WILL BE CORRECTED OR THAT THE MASTERCARD SITE IS FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. YOUR USE OF THIS SITE IS AT YOUR OWN RISK, ANY CONTENT DOWNLOADED OR OTHERWISE OBTAINED THROUGH THIS SITE IS PROVIDED AT YOUR OWN RISK, AND YOU ARE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR COMPUTER SYSTEM OR ANY DATA LOSS THAT MAY RESULT FROM YOUR USE OF THE SITE, INCLUDING WITHOUT LIMITATION, DAMAGE RESULTING FROM COMPUTER VIRUSES. PLEASE NOTE THAT SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.

Disclaimer of Damages and Limitation of Liability

IN NO EVENT SHALL MASTERCARD OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, PUNITIVE, EXEMPLARY, CONSEQUENTIAL OR OTHER DAMAGES WHATSOEVER, INCLUDING BUT NOT LIMITED TO PROPERTY DAMAGE, LOSS OF USE, LOSS OF BUSINESS, ECONOMIC LOSS, LOSS OF DATA OR LOSS OF PROFITS, WITHOUT REGARD TO THE FORM OF ACTION (INCLUDING BUT NOT LIMITED TO CONTRACT, NEGLIGENCE, OR OTHER TORTIOUS ACTIONS) ARISING OUT OF OR IN CONNECTION WITH YOUR USE OR ACCESS OF THE MASTERCARD SITE OR ITS CONTENT, EVEN IF MASTERCARD OR ITS BUSINESS PARTNERS, EMPLOYEES, REPRESENTATIVES OR AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE OR LOSS. IN NO EVENT SHALL MASTERCARD'S TOTAL LIABILITY TO YOU FOR ALL DAMAGES, LOSSES, AND CAUSES OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING, BUT NOT LIMITED TO, NEGLIGENCE), OR OTHERWISE EXCEED THE AMOUNT PAID BY YOU, IF ANY, OR ONE HUNDRED DOLLARS ($100) (WHICHEVER IS LESS), FOR ACCESSING OR PARTICIPATING IN ANY ACTIVITY RELATED TO ANY MASTERCARD SITE. APPLICABLE LAW MAY NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY OR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU.

Inapplicability of Terms of Use to any Mastercard Payment Card Cardholder Agreement

Mastercard is a leading payment services organization. Mastercard is not a financial institution and does not issue credit, debit, check or payment cards of any type of nature. Your Mastercard branded payment card relationship is with an issuing bank or financial institution, and not with Mastercard directly. Any and all questions or issues regarding your Mastercard branded payment card or cardholder account should be directed to the bank or financial institution that issued your card, and not to Mastercard. While Mastercard has a relationship with your issuing bank or financial institution, that relationship does not pertain to individual cardholders or payment card accounts.

The Mastercard Site is operated by Mastercard and its affiliates.

Miscellaneous

These Terms of Use shall be construed, interpreted and performed exclusively according to the laws of the State of New York, United States of America, without giving effect to any principles of conflicts of law. You expressly agree that any action at law or in equity arising out of or directly or indirectly relating to these Terms of Use or this Site shall be filed only in the federal or state courts sitting in New York. You hereby consent and submit to personal jurisdiction of such courts for the purposes of any action related to the Mastercard Site, your access or use thereof, or these Terms of Use, and to extra-territorial service of process.

Content and software from the Mastercard Site may be subject to U.S. export jurisdiction and the import jurisdiction of other countries. In connection with your use of this Site, you are solely responsible for complying with all applicable export, re-export, and import control laws and regulations of all applicable jurisdictions, including, but not limited to, those of the U.S. Department of Commerce, Export Administration Regulations, 15 CFR Parts 730-774, the International Traffic in Arms Regulations, country-specific economic sanctions programs implemented by the Office of Foreign Assets Control and export and import control laws and regulations of any other countries. You may not, directly or indirectly, use, distribute, transfer or transmit content or software from this Site, whether by way of a direct product or of such materials or products, software, or other technical information into which content or software from this Site has been incorporated, except in compliance with all applicable export and import laws and regulations of all relevant jurisdictions.

These Terms of Use may not be assigned by you. Mastercard may assign its rights and obligations set forth in these Terms of Use at any time. Should any part or provision of these Terms of Use be held unlawful, void, invalid or unenforceable, that portion shall be deemed severable from these Terms of Use and shall not affect the validity and enforceability of any remaining provisions. Except as provided herein, these Terms of Use constitute the entire agreement between you and Mastercard pertaining to their subject matter. Certain provisions of these Terms of Use may be superseded or added to by designated legal notices or terms located on particular pages, applications, tools or other materials that you may access within this Site. Mastercard's failure to enforce any provision of these Terms of Use or any additional terms shall not be deemed a waiver of such provisions nor of its right to enforce such provision. These Terms of Use and any related documents may be accepted in electronic form (e.g., by an electronic or other means of demonstrating assent) and your acceptance will be deemed binding between you and Mastercard. You hereby agree, without limitation, that you not will contest the validity or enforceability of these Terms of Use and any related documents.

©2015 Mastercard. Mastercard, Priceless, and the Mastercard Brand Mark are registered trademarks of Mastercard International Incorporated. Sponsor: Mastercard International Incorporated, 2000 Purchase Street, Purchase, NY 10577

Customer Service and Contact Information

General Counsel

Mastercard International Incorporated

2000 Purchase Street

Purchase, NY 10577 USA

Phone: 1-800-MASTERCARD (1-800-627-8372)

Effective Date: 11/30/2022

SAFETY IS AT THE HEART OF MASTERCARD’S STORY

Our goal is to constantly protect everyone connected to Mastercard. Our mission is clear. Every day, everywhere, we use our technology and expertise to make payments and digital interactions safe, simple and smart. Whether you are a consumer, merchant, issuer, business, or a public sector organization, you can have peace of mind knowing that your safety and security is our number one priority, and central to everything that we do.

Payment technologies have never been safer, but criminals have never been smarter and they are further enabled by the shift to the digital world through digital payments and other digital interactions, which is happening at an unprecedented rate. As technology evolves, Mastercard remains at the forefront of innovation and security to stay one step ahead of criminals and keep you safe. As more devices become e-commerce devices, our priority is to ensure their security by encouraging all innovators to build in safety and security from the start, so we can better address the challenge of potential risks.

MULTIPLE LAYERS OF TECHNOLOGY PROTECT PAYMENT TRANSACTIONS AND DIGITAL INTERACTIONS

There is no silver bullet to fight fraud, so we use multiple layers of security to protect every transaction and, beyond payments, to protect customers across digital interactions. Our technologies, processes and expertise enable us to prevent, detect and resolve threats while also enhancing the experience related to payment devices and digital interactions.

We have implemented and operate at four layers to protect the payments system and our customer’s businesses:

  • Prevent: Securing devices, data and networks in a coordinated manner across the industry helps reduce the risk of fraud significantly.
  • Identify: We work to enhance trust, as the changing world of digital connectivity creates new obligations to securely identify individuals. Our identity solutions help us deliver a near frictionless authentication experience. We support real-time, seamless identity verification on our customers’ behalf. We offer unique personal digital identity services that can be used by both consumers and customers.
  • Detect: We leverage the power of our network and our technologies to monitor transactions across the globe and identify transaction fraud, financial crime, crypto crime, and cyber threats. Our comprehensive suite of tools offered to financial institutions, merchants and other businesses can be tailored to their customer base and include everything from artificial intelligence tools designed to model and predict fraudulent scenarios, to real-time fraud scoring at the point of sale, cryptocurrency intelligence and blockchain solutions and cyber health analysis.
  • Experience: The services we offer are all focused on offering the best consumer experience possible – including our global $0 liability protection. We are building frictionless payment experiences and assist our customers to differentiate digital consumer offering and avoid payment declines if a consumer fails to inform the merchant about a replacement card. Cardholder lifecycle management is also a critical component we offer, which helps to provide an easier way to automatically replace cards on file when a new card is issued.

WE PROCESS PERSONAL INFORMATION FOR FRAUD PREVENTION AND MONITORING AND FOR PROVIDING CYBER SECURITY SOLUTIONS FOR OUR CUSTOMERS

For many of our fraud and security activities, we act as a data processor on behalf of and under the instructions of financial institutions and merchants. Mastercard International Incorporated and its affiliates (collectively, “Mastercard”) process various types of Personal Information, as a data controller, to protect you against fraud. If you are located in the EEA, UK or Switzerland, Mastercard Europe SA is the entity responsible for the processing of your Personal Information. “Personal Information” means any information relating to an identified or identifiable individual. This may include:

  • Transaction data, fraud and authentication risk scores, transaction risk factors, location data, merchant details, items purchased, information about disputed transactions and confirmed fraudulent activity.
  • Certain information gathered from the blockchain, including blockchain address, other cryptocurrency transaction details and IP address.
  • Certain information about you collected via automated means such as cookies and web beacons when you interact with our ads, mobile apps, or visit our websites, pages or other digital assets, such as IP address, browser type, operating system, mobile device unique identifier, geographical area, referring URLs and information on actions taken or interaction with our digital assets.
  • Some of our online products and services also include advanced fraud prevention technology using behavioral data based on your device interactions, such as face ID, fingerprints, keystroke timing, scroll position and mouse-location.
  • Publicly available data including information technology profile and assets of sole proprietors and cryptocurrency companies, such as domains, location data and cookies, contact details in public web pages or domain registration information, residential IP addresses in reputation lists, sanctions lists, and authorship of published intelligence about cyber security threats.
  • Identity verification data such as name, address, national identification number, mobile phone number, age, and nationality.
  • Fraud and risk data of sole proprietor, principal owner merchants and cryptocurrency companies, which may include name and contact information of the companies’ management personnel, and fraud reason code.

We obtain the above categories of Personal Information from various sources: from financial institutions and merchants, from your service providers, directly from you, from third parties as detailed below or from your interaction with our digital assets.

HOW WE MAY USE YOUR PERSONAL INFORMATION

We may use your Personal Information for the purposes set out below. We will only process your Personal Information for the below purposes when we have a valid legal ground for the processing in accordance with applicable law, depending on the country in which you are located. However, please note that even though the chart below may not list consent as a legal basis for each processing activity, in some countries consent is the only or most appropriate legal basis for the processing of Personal Information, and in those countries we rely on consent for all processing activities. In certain cases, this consent may be obtained from you on our behalf by your financial institution, merchant, service provider, or another partner.

The chart below describes the processing activities for which we act as a data controller. Where we act as a data processor on behalf of financial institutions, merchants, or other partners who operate as data controllers, the financial institutions, merchants, or other partners are responsible for ensuring a valid legal ground for the data processing. Please refer to their respective privacy policies for more information regarding the processing of your Personal Information.

    Processing Activity

Legal Basis for Processing (where required under applicable law)
  • Protect you and others against fraud, cyber incidents and strengthen the cyber resilience of your operations, and manage risk exposure and franchise quality.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • The processing is necessary for entering into, or performance of, a contract to which you are a party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of preventing and protecting against fraud, securing our network and the payment transactions that we process.
  • Monitor and prevent fraud, unauthorized transactions, claims and other liabilities on our payment network, as well as monitor and prevent fraud on the blockchain in relation to cryptocurrency.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • The processing is necessary for entering into, or performance of, a contract to which you are a party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of monitoring and preventing against fraud.
  • Authenticate you and verify your identity.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • The processing is necessary for entering into, or performance of, a contract to which you are a party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of authenticating you and verifying your identity.
  • Maintain the integrity and security of our payment networks.
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for maintaining the integrity and security of our payment networks.
  • Comply with legal obligations, including under applicable anti money laundering legislation.
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information for compliance with legal obligations.
  • Conduct internal research and development which aim at evaluating and enhancing our fraud detection, prevention, monitoring and cyber resilience operations and products.
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of conducting internal research and development with the aim of preventing and protecting against fraud, securing our network and the payment transactions that we process.
  • Aggregate some of your Personal Information to create rules-based or artificial intelligence models to identify past and potential future fraud or money laundering patterns to offer advanced fraud prevention, AML and security features to financial institutions, merchants, customers and partners. We use machine learning to analyze and identify fraudulent or illegal transactions. The use of these models may lead your financial institution, merchant or service provider to make decisions whether or not to verify your identity or authorize your payment.
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of aggregating Personal Information and creating models to identify, prevent and protect our customers and the payment ecosystem against fraud.

HOW WE SHARE YOUR PERSONAL INFORMATION

We may share your data with third parties including financial institutions, identity verification service providers, fraud data service providers, government entities, utilities, public records, credit bureaus, property files, telecommunications operators, watch lists, geo-visualization service providers. We ensure that your Personal Information is only used for the above purposes subject to strict data protection and security obligations through our contracts with such third parties.

YOUR RIGHTS, HOW TO CONTACT US, AND ADDITIONAL INFORMATION ABOUT OUR PRACTICES

You have certain rights and choices regarding the Personal Information we maintain about you. For more information about your rights, to contact us, or to learn more about how we share, transfer, retain or protect your Personal Information, please read our Global Privacy Notice. You, or a party authorized to act on your behalf, can exercise your rights that are detailed in the Global Privacy Notice by emailing us at: privacyanddataprotection@mastercard.com.

This Fraud and Security Notice provides further information about certain aspects of the processing of Personal Information covered by our Global Privacy Notice. Some of the security and fraud prevention and monitoring solutions mentioned above may have their specific privacy notices. Please consult them for more information. For enquiries about your Mastercard card and your purchases, please contact your financial institution or merchant. More information about how to contact them can be found on their websites.

Our Data product retrieves your payment account information with your explicit consent.

Effective Date: 2/17/2025

At Mastercard, we offer and support market-leading loyalty programs that allow you to earn points or rewards for purchases made with your eligible Mastercard card and to redeem those points or rewards for promotions, discounts, cashback, rebates, sweepstakes, special offers or other benefits (“Programs”). We recommend that you read this notice together with Mastercard's Global Privacy Notice.

1. SCOPE OF THIS NOTICE

This privacy notice (“Notice”) describes how Mastercard International Incorporated and its affiliates (collectively “Mastercard”, “us” or “we”) process Personal Information in connection with our Programs. “Personal Information” means any information relating to an identified or identifiable individual (“you”).

This Notice does not cover the processing by Mastercard in the context of other programs such as the priceless.com website. Please refer to the Priceless privacy notice for information about how we process your Personal Information when you use priceless.com. This Notice also does not cover the processing where we act on behalf of and under the instructions of financial institutions (e.g., the bank that issued your Mastercard card), merchants and other partners which act as data controllers, including for processing payment transactions. Please refer to their privacy notices for information about the processing of your Personal Information in such cases.

2. WHAT PERSONAL INFORMATION WE PROCESS FOR THE PROGRAMS

Under the Programs, we collect the following types of Personal Information relating to you:

  • Account information and contact details, such as full name, email address, payment card number(s) you choose to register for a Program, expiry date, CVC2, login credentials, accrued total of points or rewards and points or rewards redemption history. Depending on the program, you may also choose to provide additional details, such as your address, phone number, date of birth, tax ID number, and gender where permitted by law.
  • Transaction information related to the card(s) enrolled in a Program, such as date / time of payment(s), personal account number, name of merchant, commercial and transaction code, currency and amount of a purchase, and a tokenized ID generated to identify whether your purchases are eligible for the Programs.
  • Your preferences for or interest in specific offers or categories of offers.
  • Your geographic location (if you choose to enable the sharing of your location to see offers near you).
  • Information provided when completing voluntary surveys.
  • Information provided in connection with our customer support, such as date, time and content of your message.
  • Device-related information (e.g., device ID, device model, browser type, operating system, referring URL, IP address, location data) and information about your interaction with our Programs on our websites (e.g., dates and times of action). We collect such information via cookies and similar technologies (such as web beacons and other trackers), as described in the consent tools provided on our websites.

We obtain the above categories of Personal Information from various sources: from third parties such as financial institutions, loyalty program operators and merchants, directly from you, or from your interaction with cookies and similar technologies. Depending on applicable law, some of this information may qualify as sensitive Personal Information.

3. HOW WE USE YOUR PERSONAL INFORMATION

We may use your Personal Information for the purposes set out below. Depending on the country in which you are located, we will only process your Personal Information when we have a legal basis for the processing, as identified in the table below. However, please note that even though this table does not list consent as a legal basis for each processing activity, in some countries consent is the only or most appropriate legal basis for the processing of Personal Information, and in those countries we rely on consent for all processing activities.

    Processing Activity

Legal Basis for Processing

Determine eligibility to receive offers in connection with your card type as well as to identify transactions that may qualify for a point or reward.

  • You consented to or directed the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are a party; or
  • We, or a third party, have a legitimate interest in using your Personal Information to be able to determine eligibility for, manage, and provide you with the Programs and their benefits.

Create and manage your Program account(s), provide our services, communicate with you about the Programs and respond to your inquiries.

  • You consented to or directed the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are a party; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information to create and manage accounts, provide our services, and respond to your inquiries.

Process and fulfil purchases made on or through a Program.
  • You consented to or directed the use of your Personal Information
  • The processing is necessary for entering into, or performance of a contract to which you are a party; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations.

Protect against and prevent fraud and (cyber) threats, unauthorized transactions, abuse of the Programs, claims and other liabilities.
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud, securing our Programs, our network, and the payment transactions that we process.

Send you push notifications and marketing communications about the Programs (including contests, sweepstakes, and any other marketing activities).
  • You consented to or directed the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purpose of marketing products and services.

Analyze your preferences, spending patterns, interests, use of and interaction with the Programs to provide you with relevant offers, personalized content and personalized recommendations in connection with a Program (e.g., we may present you offers that are in your geographic range or based on your purchase history).
  • You consented to or directed the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • We, or a third party, have a legitimate interest in using your Personal Information for the purposes of providing you with personalized content and recommendations.

Operate, evaluate, and improve our products and services, including the effectiveness of our offers and campaigns, and analyze our Program websites, mobile apps and any other digital assets to facilitate their functionality.

  • You consented to or directed the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • We, or a third party, have a legitimate interest in using your Personal Information to operate, evaluate, and improve our products or services and promote customer engagement with the Program.

Anonymize Personal Information and prepare aggregated reports for internal analysis and to advise our financial institutions, merchants and other customers and partners in relation to spending patterns, fraud, and other insights.
  • We, or a third party, have a legitimate interest in using your Personal Information to anonymize Personal Information and prepare aggregated data reports; or
  • The processing is undertaken for statistical and/or research purposes (in jurisdictions where this legal basis is available).

Enforce applicable terms of use or as necessary to establish, exercise and defend legal rights.
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information to enforce Program terms of use and establish, exercise, and defend legal rights.

Comply with applicable laws or as requested by any judicial process, law enforcement or governmental agency having or claiming jurisdiction over Mastercard.
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • We, or a third party, have a legitimate interest in using your Personal Information to respond to a judicial process, law enforcement or governmental agency.

Comply with industry standards and our policies.
  • You consented to or directed the use of your Personal Information; or
  • The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
  • The processing is necessary for entering into, or performance of a contract to which you are party; or
  • We, or a third party, have a legitimate interest in using your Personal Information to comply with industry standards and our policies.

4. HOW WE SHARE YOUR PERSONAL INFORMATION

We may share your Personal Information:

  • With Mastercard’s headquarters in the U.S., our affiliates, and other entities within Mastercard’s group of companies.
  • With marketing agencies and other service providers who perform services on our behalf and in connection with the purposes described in this Notice. We subject them to strict contractual data protection and security obligations.
  • With financial institution(s) (e.g., banks that issued the card(s) enrolled in a Program) or merchants to the extent necessary to support Program-related initiatives, and to handle complaints.
  • With third parties that operate or support a Program that you choose to join.
  • With redemption partners to process or fulfil purchases or transfers made through a Program.
  • When we believe disclosure is necessary to protect individuals’ vital interests, to protect Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
  • As required under applicable law or legal process, or to respond to requests from law enforcement or governmental agencies. When receiving such requests, we will follow the process set out in our Binding Corporate Rules, where applicable.
  • In the event of the sale or transfer of our business or assets, in whole or in part. In such event, we will use reasonable efforts to direct the transferee to use the Personal Information you provided to us in a manner consistent with this Notice.

5. YOUR RIGHTS AND CHOICES, HOW TO CONTACT US, AND ADDITIONAL INFORMATION ABOUT OUR PRACTICES

You have certain rights and choices regarding the Personal Information we maintain about you. For more information about how to submit a request to exercise your rights to your Personal Information, or your right to contact us, or to learn more about how we share, transfer, retain or protect your Personal Information, please refer to “Your Rights and Choices” in our Global Privacy Notice. You can exercise your rights to opt out of our processing of Personal Information by emailing us at: privacyanddataprotection@mastercard.com. Please indicate the name of the Program your request is about in the subject of your email.

This Notice provides further information about certain aspects of the processing of Personal information covered by our Global Privacy Notice. For enquiries about your Mastercard card and your purchases, please contact your financial institution or merchant. More information about how to contact them can be found on their websites.

Effective Date: November 1, 2018

Last Updated: March 16, 2023

Mastercard International Incorporated, its affiliates and other entities within the Mastercard group of companies (“Mastercard”, “we”, “us”, or “our”) respect your privacy.

This Privacy Notice applies to the processing of Personal Information collected in connection with your participation in the Mastercard Talent Community. This Privacy Notice does not cover the collection and use of your Personal Information by Mastercard in the context of other Mastercard programs, by third parties on other Mastercard branded websites, by your Mastercard Card issuers (e.g., your bank), or any other information or communications that may reference Mastercard outside of the Mastercard Talent Community.

This Privacy Notice describes the types of Personal Information we collect in connection with the Mastercard Talent Community, the purposes for which we collect that Personal Information, the other parties with whom we may share it and the measures we take to protect the security of the information. It also tells you about your rights and choices with respect to your Personal Information, and how you can reach us to update your contact information or get answers to questions you may have about our privacy practices.

Your engagement with the Mastercard Talent Community is subject to this Privacy Notice and the applicable Terms of Use. Children under the age of 16 are not eligible to receive career services information. For more information about Mastercard’s privacy practices, please visit Mastercard’s Global Privacy Notice at https://www.mastercard.com/us/en/global-privacy-notice.html.

 

1. Personal Information We May Collect

“Personal Information” means any information relating to an identified or identifiable individual. We may collect the following Personal Information in connection with your participation in the Mastercard Talent Community:

  • Identification details (first name, last name)
  • Contact information (email address, phone number, city, state, country)
  • Area of interest
  • LinkedIn Profile URL and the publicly available sections of your LinkedIn profile URL, if you provide it to us
  • Sector experience
  • Curriculum vitae/resume
  • Any other information you choose to share, such as information included in your CV/resume, if you provide it to us
  • Website, device and mobile app usage, and similar information collected via automated means, such as cookies and similar technologies.

In certain jurisdictions, and to the extent we may lawfully do so under applicable law, Mastercard may process Sensitive Personal Information, such as racial or ethnic origin, health-related data, religious beliefs, and trade union membership.

We receive most Personal Information directly from You (e.g. provided through our Talent Community website). To the extent permitted by law, we also may receive Personal Information indirectly from third parties (e.g. LinkedIn, recruitment agencies, organizers of recruitment events).

For the purpose of this Privacy Notice, unless otherwise specified, “Personal Information” means any information relating to an identified or identifiable individual. In connection with your participation in Mastercard’s Talent Community, we obtain Personal Information relating to you from various sources, as described below.

“Processing” means any operation or set of operations performed upon Personal Information, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing will be carried out on paper and by electronic means.

Where applicable, we indicate whether your Personal Information is required, as well as the impact if you fail to provide it. If You do not provide Personal Information when required, you may not be able to participate in the Mastercard Talent Community and we may not be able to contact you in relation to events and future career opportunities.

The following types of Personal Information may be collected and Processed by the Company or on behalf of the Company, in so far as permitted under applicable law:

    a.   Personal Information Provided by You

    When you subscribe to Mastercard’s Talent Community and provide your consent to receive personalized communications and alerts regarding job opportunities and recruiting events at Mastercard, we ask you to provide certain Personal Information, such as your name, email address, phone number, location, area of interest, LinkedIn profile URL, sector experience, CV/resume and any other additional information you decide to provide (such as information included in your CV/resume).

    We may keep your Personal Information for as long as permitted under applicable law and in accordance with our data retention policies (as described further below in the section “How We Protect Your Personal Information”).

    If you provide additional information to us at a job or career fair, recruiting or professional event, conference or other in-person or virtual occasion, we may contact you and ask your consent to join our Talent Community so that we can send you personalized communications and job opportunities.

    b.   Personal Information Provided by Third Parties

    You may provide information to recruiters, associations, professional organizations, schools or universities, or job boards.

    You may also provide information on third party job websites and/or social media websites, including posts, articles, comments, reviews, photos, which you allow to be shared with prospective employers and/or make publicly available. Mastercard does not control the collection, use, disclosure or transfer of personal information on such third-party websites or the privacy settings available to you on those third-party websites related to the sharing of your personal information with prospective employers.

    c.   Personal Information Obtained from Your Interactions with the Mastercard Talent Community Website

    When you visit our websites, we may collect certain information via automated means such as cookies and similar technologies. This includes your IP address, information on actions you have taken on the website, dates and times of those actions, and methods of accessing the website. We use this information to improve the website by assessing how many users access or use our website, which content, products, and features of our website most interest our visitors and how our service performs from a technical point of view.

    We ask for your consent to place cookies and similar technologies that aren’t strictly necessary for making the website work. You can manage your cookie preferences at any time using the ‘Manage Cookies’ tool located at the bottom of the webpage. Your browser may also tell you how to be notified or and opt out of having certain types of cookies placed on your device. Please note, however, that without certain cookies you may not be able to use all the features of our websites, apps or online services.

2. How We May Use Your Personal Information

We may use your Personal Information to:

  • Send you personalized communications and provide you with information about upcoming professional and/or career-related events and programs via email and text message (where you provide your consent to do so).
  • Personalize your interactions and experience with our recruiting and career websites.
  • Determine your suitability for job opportunities with Mastercard.
  • Assess your skills, experience, and interests against our current and future career opportunities.
  • Send you job alerts that you signed up for.
  • Notify you of job openings at Mastercard that could be a good fit based on your Talent Community profile.
  • Register you for Talent Community and/or career-related events.
  • Make improvements to and further develop our recruitment processes, practices and websites.
  • Ensure safety and security of our systems.
  • Perform data analysis and analytics related to matching relevant future employment opportunities with your background, skills and experience.
  • In certain jurisdictions, enforce our Terms of Use.
  • Comply with our legal obligations.

In some cases, when looking to fill a job opportunity, we may process your Personal Information with assistance from automated employment tools. However, all decisions with regards to Talent Community marketing and any use of automated employment tools also include the use of human review and/or intervention.

Mastercard only Processes your Personal Information for the above purposes when it can rely on a lawful legal basis.

We use personal Information we obtain about you for the purposes set out below. Depending on the country in which you are located, we will only process your Personal Information when we have a legal basis for the processing as identified in the table below.

    Processing activity

Legal Basis for processing

    Send you personalized communications and notify you about upcoming professional or career-related events and programs, some of which may be tailored based on your profile and/or designated interests.

    You consented to the use of your Personal Information

    Personalize your interactions and experience with our recruiting and career websites.
  • You consented to the use of your Personal Information; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Determine your suitability for job opportunities with Mastercard.
  • You consented to the use of your Personal Information; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Assess your skills, experience, and interests against our current and future career opportunities.

  • You consented to the use of your Personal Information; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Send you job alerts that you signed up for.

    You consented to the use of your Personal Information

    Notify you of job openings at Mastercard that could be a good fit based on your Talent Community profile.

    You consented to the use of your Personal Information

    Register you for Talent Community and/or career-related events.

  • You consent to the use of your Personal Information; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Make improvements to and further develop our recruitment process, practices and websites.

  • You consented to the use of your Personal Information; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Ensure the safety and security of our systems.

  • The processing is necessary for compliance with a legal obligation; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Perform data analyses (including anonymization of personal information) to evaluate engagement, trends, forecasts, gaps.

  • You consented to the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are a party; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    In certain jurisdictions, enforce our Terms of Use.

  • The processing is necessary for compliance with a legal obligation; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Perform auditing, research, and analysis in order to maintain, protect, and improve the Talent Community experience.
  • You consented to the use of your Personal Information; or
  • The processing is necessary for entering into, or performance of a contract to which you are a party; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity

    Respond to and process your inquiries, complaints, disputes.

  • The processing is necessary for compliance with a legal obligation; or
  • We, or a third party, have a legitimate interest in carrying out the processing activity.

Comply with applicable legal requirements and internal policies.

  • The processing is necessary for compliance with a legal obligation.

Where required under applicable law, we have carried out balancing tests for the data processing based on our or a third party’s legitimate interests to ensure that such legitimate interest is not overridden by your interests, fundamental rights or freedoms. For more information on our balancing tests, you may contact us as described in the “How to Contact Us” section below.

3. How We Share Your Personal Information

We may share Your Personal Information with:

  • Mastercard’s headquarters in the U.S., our affiliates and other entities within Mastercard’s group of companies.
  • Members of the Human Resources and/or Talent Acquisition team to the extent they are involved in our Talent Community.
  • Third party service providers to the extent they provide services in connection with our Talent Community.
  • Third parties in the event of a sale or transfer of our business or assets, or for other lawful purposes.

We do not sell Personal Information we collect about you, as defined by the California Consumer Privacy Act.

Subject to applicable law, we may also disclose Personal Information to other third parties when we have a lawful legal basis to do so, such as with your consent or authorization, as required under applicable law, and to protect the rights and properties of Mastercard.

We do not share or otherwise disclose Personal Information we collect about you, except as described in this Privacy Notice or otherwise disclosed to you at the time the information is collected. We do not sell Personal Information we collect about you, as defined by the California Consumer Privacy Act. Please see the “Data Transfers” section below to understand how we comply with applicable cross-border data transfer rules.

We may share the Personal Information we collect with:

  • Mastercard’s headquarters in the U.S., subsidiaries and affiliates globally to the extent that they are involved in our Talent Community;
  • Members of the Human Resources and/or Talent Acquisition departments to the extent that they are involved in our Talent Community. Mastercard staff accessing Personal Information are required to maintain its confidentiality and to Process such information in accordance with internal policies and applicable law;
  • Third party service providers to the extent they provide services in connection with our Talent Community.

We also may share Personal Information with our service providers who perform services on our behalf and in relation to the purposes described in this Privacy Notice, such as companies that develop and support the operation of our CRM platform and facilitate our communications. In addition, we may share Personal Information with third-party service providers:

  • With your consent or authorization;
  • In the context of a sale or transfer involving all or a portion of Mastercard’s business or assets (including in the event of a reorganization, dissolution or liquidation);
  • In response to requests by government agencies, such as law enforcement agencies;
  • To protect the rights and properties of Mastercard;
  • If required to do so by law, regulation or legal process (such as a court order or subpoena);
  • When we believe disclosure is necessary or appropriate to prevent physical harm to Mastercard employees or financial loss;
  • As part of an investigation of suspected illegal activity.

We enter into contracts with these service providers that require them to only process Personal Information in accordance with our instructions and as necessary to perform services on our behalf or comply with legal requirements. We also require them to safeguard the security and confidentiality of the Personal Information they process on our behalf by implementing appropriate technical and organizational security measures and confidentiality obligations binding employees who access Personal Information. For more information on service providers, please contact us as described in the “How to Contact Us” section below.

4. Your Rights and Choices

Depending on the country in which you are located, you may have certain rights. These may include the right to:

  • Access your Personal Information, obtain a copy of it, rectify it, restrict or object to its processing, or request its deletion, destruction or anonymization.
  • Receive the Personal Information that you provided to us in a structured, commonly used and machine-readable format in order to transmit it to another company.
  • Withdraw any consent you provided.
  • Where applicable, lodge a complaint with your Supervisory Authority.

Please be aware, that if You exercise your right to object or your rights of restriction or deletion, or if You decline to share certain information with us, we may not be able to assess your suitability for career opportunities.

You can contact the Data Protection Officer and exercise your rights as described in the “How To Contact Us” section below.

You have certain rights regarding the Personal Information we maintain about you and certain choices about what Personal Information we collect from you, how we use it, and how we communicate with you.

Depending on the country in which you are located, you may have the following rights:

  • Right of access: You have the right to access your Personal Information and request a copy of it. Mastercard may choose to limit access to Personal Information where: the disclosure would violate the rights of other Individuals; it relates to an ongoing investigation of wrongdoing and disclosure could compromise the investigation; or Mastercard is otherwise authorized to limit or deny such access under applicable law.

  • Right to rectification: You have the right to rectify your Personal Information that is inaccurate or incomplete.

  • Right to object: You may object to certain types of Processing of your Personal Information. We will reasonably accommodate such objections, as appropriate, and if granted, Mastercard will no longer Process your Personal Information unless we have compelling legitimate and lawful grounds to Process it. Mastercard will not subject Individuals to any disciplinary action for objecting to the Processing of Personal Information.

  • Right to deletion: You may ask us to delete your Personal Information in specific cases such as when: we no longer need that information; You withdraw your consent to the Processing and we do not have any other legal ground for the Processing; your Personal Information has been Processed unlawfully; or when deletion is required by law.

  • Right to restriction: You may request that we limit the way in which we Process your Personal Information where (i) You contest the accuracy of your Personal Information; (ii) the Processing is unlawful and You do not want your Personal Information deleted; (iii) we no longer need your Personal Information for the Processing, but You request we retain it in anticipation of a potential legal claim; or (iv) You objected to the Processing and we are reviewing whether we have an overriding interest to keep Processing the Personal Information.

  • Right to withdraw consent: Where Mastercard relies on consent to Process Personal Information, You have the right to withdraw consent at any time, without affecting the lawfulness of Processing before the consent withdrawal.

  • Right to data portability: You may also have the right to data portability, which means the ability to easily transfer your Personal Information to another company, when You provided your Personal Information directly to us, and where the Processing is based on your consent or is necessary for the performance of a contract.

  • Right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority of your habitual residence, of where Your place of work is located or where the alleged infringement took place.

Please be aware, that if You exercise your right to object or your rights of restriction or deletion, or if You decline to share certain information with us, we may not be able to assess your suitability for future job opportunities. Also, some of these rights may be limited in certain circumstances by local law.

You can exercise your rights by contacting us, as described in the “How To Contact Us” section below.

Mastercard does not intend to or knowingly collect information from persons younger than the age of sixteen (16). If we learn that we have inadvertently collected information from a person younger than the age of 16, we will take commercially reasonable efforts to delete that information.

5. How We Protect Your Personal Information

We maintain appropriate security safeguards to protect your Personal Information and only retain it for a limited period of time.

When your Personal Information is no longer necessary for the original purposes for which we Processed it, we either delete such Personal Information or maintain it in a non-identifiable form (unless we are required by applicable law to keep this information for a longer period).

Mastercard maintains appropriate administrative, technical, and physical safeguards to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Information transmitted, stored or otherwise Processed. More information about our security policies is available upon request.

Your Personal Information is not kept for longer than necessary for the original purposes for which it was collected. We take measures to delete your Personal Information or keep it in a form that does not permit identifying You when such information is no longer necessary for the purposes for which we Process it, unless we are required by law to keep this information for a longer period.

When determining the retention period, we take into account various criteria such as the nature and length of our relationship with You, business needs, statutory retention periods and any retention necessary to anticipate legal actions in accordance with any applicable statute of limitations. The periods are set forth in Mastercard retention policies per country which reflect local legal requirements.

For further guidance on the applicable retention periods, please contact us as described in the “How To Contact Us” section below.

6. Data Transfers

Mastercard is a global business. We may transfer your Personal Information to the United States and other countries which may not have in place the same data protection laws as the country in which you initially provided the information. Nonetheless, we will protect your Personal Information in accordance with this Privacy Notice, or as otherwise disclosed to you.

We comply with applicable legal requirements when transferring Personal Information to countries other than the country where you are located. If you are located in the EEA, we will transfer your Personal Information in accordance with adequacy decisions (see list of countries for which the European Commission has issued an adequacy decision here), Binding Corporate Rules (“BCRs”), standard contractual clauses, and other data transfer mechanisms.

Mastercard is a global business. We may transfer the Personal Information we collect about you to recipients in countries other than your country, including the United States, where we are headquartered. These countries may not have in place the same data protection laws as the country in which you initially provided the information. When we transfer your Personal Information to other countries, we will protect that information as described in this Privacy Notice or as disclosed to you at the time of data collection.

We comply with applicable legal requirements when transferring Personal Information to countries other than the country where you are located. In particular, we have established and implemented BCRs that have been recognized by EEA data protection authorities as providing an adequate level of protection to the Personal Information we process globally. We equally rely on UK BCRs to transfer Personal Information outside of the United Kingdom. A copy of our BCRs are available here.

We may also transfer Personal Information to countries for which adequacy decisions have been issued (see list of countries for which the European Commission has issued an adequacy decision here), use contractual protections for the transfer of Personal Information to third parties, such as the European Commission’s Standard Contractual Clauses or their equivalent under applicable law, or rely on other data transfer mechanisms where applicable. Depending on your country, you may contact us as specified in the “How To Contact Us” section below to obtain a copy of the safeguards we use to transfer Personal Information outside of your jurisdiction.

If you are located in mainland China, you understand that we may transfer the Personal Information we collect about you to recipients in countries or regions other than mainland China, including Mastercard International Incorporated in the United States, Mastercard Asia/Pacific Pte. Limited in Singapore and to other affiliates as listed here. When we conduct international transfers of Personal Information, we will comply with requirements stipulated under applicable laws. By participating in the Talent Community, you will be deemed as having consented to our cross-border sharing of your Personal Information to recipients in countries or regions other than mainland China in accordance with this Privacy Notice.

7. Features and Links to Other Websites

You may choose to use certain features available via the Talent Community, which are owned and operated independently by some of our partners.

You may choose to use certain features available via the Talent Community that are owned and operated independently by some of our partners, or You may click on links to third party websites for your convenience and information. These features, which may include social networking services, geographic location tools, and other apps and websites, may operate independently from Mastercard. They may have their own privacy notices or policies, which we strongly suggest you review. To the extent any features or linked websites you visit are not owned or operated by Mastercard, we are not responsible for these websites’ content, use, or privacy practices.

8. Updates to This Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in our privacy practices.

Mastercard may from time to time make changes to this Privacy Notice to reflect changes in its legal or regulatory obligations, or to reflect changes in the manner in which we Process your Personal Information or for any other reason we deem appropriate. We will notify you of any significant or substantial changes to our Privacy Notice.

9. How to Contact Us

You can e-mail our Global Privacy Office at privacyanddataprotection@mastercard.com. You may also submit a request to exercise your rights to your Personal Information by emailing us at: privacyanddataprotection@mastercard.com.

If you have any questions, comments or complaints about this Privacy Notice and our privacy practices, or would like to update your privacy preferences, please email us at: privacyanddataprotection@mastercard.com or write to us at:

Global Privacy Office
Mastercard International Incorporated
2000 Purchase Street
Purchase, New York 10577
USA

If you are located in California, to exercise your rights under the CCPA, you may submit your request by emailing us at: privacyanddataprotection@mastercard.com, or call our toll-free number: 1-833-244-4084.

If you are located in the EEA, Mastercard Europe SA is the entity responsible for the processing of your Personal Information (or data controller). You may submit your request to exercise your rights to your Personal Information by emailing us at: privacyanddataprotection@mastercard.com, or write to us at:

Europe Data Protection Officer
Mastercard Europe SA
Chaussée de Tervuren 198A
B-1410 Waterloo
Belgium

If you are located in Brazil, Mastercard Brasil Soluções de Pagamento Ltda. is the entity responsible for the processing of your Personal Information. You may submit your request to exercise your rights to your Personal Information by emailing us at: privacyanddataprotection@mastercard.com or write to us at:

Brazil Data Protection Officer
Mastercard Brasil Soluções de Pagamento Ltda.
Avenida das Nações Unidas, 14.171, 20º andar, Crystal Tower
São Paulo/SP
Brasil
CEP 04794-000

If you are located in Asia Pacific (excluding mainland China), Middle East or Africa, Mastercard Asia Pacific Pte. Ltd. is the entity responsible for the processing of your Personal Information. You may submit your request to exercise your rights to your Personal Information by emailing us at: privacyanddataprotection@mastercard.com or write to us at:

Asia Pacific, Middle East and Africa Data Protection Officer
Mastercard Asia/Pacific Pte Ltd
3 Fraser Street, DUO Tower, Level 17
Singapore 189352

If you are located in mainland China, Mastercard Shanghai Business Consulting Ltd. is the entity responsible for the processing of your Personal Information. You may submit your request to exercise your rights to your Personal Information by emailing us at: privacyanddataprotection@mastercard.com or writing to us at:

China Data Protection Officer
Room 2907-14, Part of 29/F Tower 2
Shanghai IFC, 8 Century Avenue
China (Shanghai) Pilot Free Trade Zone

For more information on Mastercard’s privacy practices in other contexts, please refer to our Global Privacy Notice available at https://www.mastercard.com/us/en/global-privacy-notice.html.

For all other enquiries about your Mastercard card and your purchase, you must contact your issuing bank or the participating merchant. More information about how to contact them can be found on their respective websites.


10. U.S. Privacy Addendum

If you reside in the United States, this U.S. Privacy Addendum supplements the information above for certain states, as indicated in this Section 10.

LAST UPDATED: March 16, 2023

Application

This U.S. Privacy Addendum supplements the information contained in the Global Mastercard Talent Community Privacy Notice for California residents, as indicated below.

Additional disclosures for California residents

If you are a California resident from whom we collect Personal Information as a business under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) (“CCPA”), you may rely on the Global Mastercard Talent Community Privacy Notice and the additional information below.

For the purpose of this section for California residents, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the CCPA. Personal Information does not include information that is publicly available, deidentified, or aggregated (as those terms are defined in the CCPA) or otherwise excluded from the scope of the CCPA.

    1. Categories of Personal Information about you that we Collect and Disclose

    The chart below provides the categories of Personal Information (as defined by the CCPA) we have collected and disclosed for a business purpose.

    Category

    We Collect

    We Disclose

    A. Identifiers. Examples: contact information (e.g., name, postal address, telephone number), unique personal identifiers or numbers, online identifier, device identifier(s), internet protocol address, email address, and similar identifiers. We may also associate information that you submit to us, such as content on our social media pages, with your identifiers.

    Yes

    Yes

    B. Categories of Personal Information in Cal. Civ. Code Section 1798.80(e). Examples: Name, address, telephone number, email address and IP address.

    Yes

    Yes

    C. Internet or Other Electronic Network Activity Information. Examples: Cookie and web beacon data, IP address, and pages viewed and actions you take on our online properties and apps.

    Yes

    Yes

    D. Sensory Information. Examples: Photographs (if you include them in your CV/resume or LinkedIn profile).

    Yes

    Yes

    E. Professional or Employment-Related Information. Examples: Professional information such as job title, department, and business unit. Additionally, information you provide as part of your enrollment in the Talent Community, e.g., contact information and employment history.

    Yes

    Yes

    F. Inferences Drawn from Personal Information. Examples: Personal characteristics and interests.

    Yes

    Yes

    2. Sources of Collection of Personal Information

    We have collected Personal Information from the following categories of sources:

    • You/Your Devices: You or your devices directly.
    • Social Networks, such as LinkedIn.
    • Third Parties: such as former employers, educational institutions, background check agencies, credit reporting agencies, and independent service providers acting as a business (always in compliance with applicable law).
    • Public: Publicly accessible sources.

    3. Use of your Personal Information

    We collect, use, and disclose your Personal Information in accordance with the specific business and commercial purposes described in Section 2 of the Global Mastercard Talent Community Privacy Notice, entitled “How We May Use Your Personal Information”.

    4. Disclosure of your Personal Information to Third Parties

    With respect to the categories of Personal Information identified above in Section 1, we disclose your Personal Information to the following categories of third parties:

    • Mastercard Personnel: members of our internal departments to the extent that they are involved in the Talent Community. Personal Information we disclose: Identifiers; Categories of Personal Information in Cal. Civ. Code Section 1798.80(e); Internet or Other Electronic Network Activity Information; Sensory Information, Professional or other Employment-related Information, or Inferences Drawn from Personal Information.
    • Affiliates: Personal Information we disclose: Identifiers; Categories of Personal Information in Cal. Civ. Code Section 1798.80(e); Internet or Other Electronic Network Activity Information; Sensory Information, Professional or other Employment-related Information, or Inferences Drawn from Personal Information.
    • Vendors: Vendors and service providers. Personal Information we disclose: Identifiers; Categories of Personal Information in Cal. Civ. Code Section 1798.80(e); Internet or Other Electronic Network Activity Information; Sensory Information, Professional or other Employment-related Information, or Inferences Drawn from Personal Information.
    • Third Parties as Legally Required: Third parties as required by law and similar disclosures. Personal Information we disclose: Identifiers; Categories of Personal Information in Cal. Civ. Code Section 1798.80(e); or Professional or other Employment-related Information.
    • Third Parties in Merger/Acquisition: Third parties in connection with a merger, sale, or asset transfer. Personal Information we disclose: Identifiers; Categories of Personal Information in Cal. Civ. Code Section 1798.80(e); or Professional or other Employment-related Information.

    We do not have actual knowledge that we sell Personal Information of consumers under 16 years of age or that we share Personal Information of consumers under 16 years of age for CCBA.

    We do not sell your Personal Information or “share” Personal Information with third parties for “cross-context behavioral advertising”.

    We do not collect, use or discloses sensitive personal information for purposes other than those permitted by the CCPA.

    Retention

    We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as, the nature and length of our relationship with you, the impact on your application if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

    5. Your Privacy Rights

    If you are a California resident, you have the rights as set out in this section and may exercise them by following this guidance.

    Your rights:

    Right to Know and Access. You may submit a verifiable request for (as applicable to you as a member of the Mastercard Talent Community) information regarding the: (1) categories of Personal Information collected, or disclosed by us; (2) purposes for which categories of Personal Information are collected by us; (3) categories of sources from which we collect Personal Information; (4) categories of third parties with whom we disclosed Personal Information; and (5) specific pieces of Personal Information we have collected about you.

    Right to Delete. Subject to certain exceptions, you may submit a verifiable request that we delete Personal Information about you that we have collected from you.

    Right to Correct. You have the right to correct inaccurate Personal Information that we maintain about you.

      Verification. Requests for access, deletion, or correction of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested pursuant to relevant CCPA requirements, limitations, and regulations. Mastercard is committed to secure personal information. When data subjects exercise their privacy rights via email, we verify their identity by using their contact information (email and/or name and surname).


    Right to Not Receive Discriminatory Treatment. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations. We will not retaliate against you for exercising your CCPA privacy rights.

    How to Submit Data Subject Rights Requests as a Talent Community member:

    To exercise your rights under the CCPA, please submit your request to privacyanddataprotection@mastercard.com, or call our toll-free number: 1-833-244-4084.

    Authorizing an Agent. If you are acting as an authorized agent to make a request to know, delete, correct, or opt out on behalf of a California resident, you may email us at privacyanddataprotection@mastercard.com, or call our toll-free number: 1-833-244-4084. Please note that we will require you to attach a written authorization signed by the resident whose Personal Information will be subject to the request.